« previous next »
Pages: [1]   Go Down

Author Topic: [Solved] False Positive detection on EvernoteMarkup.exe VPS:131114-1  (Read 4662 times)

0 Members and 1 Guest are viewing this topic.

spg SCOTT

  • Guest
[Solved] False Positive detection on EvernoteMarkup.exe VPS:131114-1
« on: November 15, 2013, 08:57:33 PM »
Hi all

I am seeing a detection on a file called EvernoteMarkup.exe.

I don't believe this to be a correct detection. I have submitted via the program, and tried to send via email but it seems to fail. (I think because of the file size)


VT:
https://www.virustotal.com/en/file/5d1100cb40f45d44d0982c0b9bbf79c1f6394e6ad2dd065492beabd7a9508f87/analysis/1384543254/

Thanks

Scott

EDIT: Fixed in 131116-0
« Last Edit: November 16, 2013, 02:33:09 PM by spg SCOTT »
Logged

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: False Positive detection on EvernoteMarkup.exe VPS:131114-1
« Reply #1 on: November 15, 2013, 08:59:06 PM »
 First submission 2013-11-15 19:20:54 UTC (37 Minutes ago)

Maybe this is not a false positive.

Are you sure?
Logged
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: False Positive detection on EvernoteMarkup.exe VPS:131114-1
« Reply #2 on: November 15, 2013, 09:18:58 PM »
Upload to ThreatExpert and see what it does  http://www.threatexpert.com/submit.aspx
 
Nope.... file is to big... max 5mb upload
« Last Edit: November 15, 2013, 09:21:38 PM by Pondus »
Logged

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: False Positive detection on EvernoteMarkup.exe VPS:131114-1
« Reply #3 on: November 15, 2013, 09:19:50 PM »
You can also use Malwr: https://malwr.com/submission/
Logged
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline Milos

  • Avast team
  • Super Poster
  • *
  • Posts: 2294
Re: False Positive detection on EvernoteMarkup.exe VPS:131114-1
« Reply #4 on: November 15, 2013, 09:33:50 PM »
Quote from: spg SCOTT on November 15, 2013, 08:57:33 PM
Hi all

I am seeing a detection on a file called EvernoteMarkup.exe.

I don't believe this to be a correct detection. I have submitted via the program, and tried to send via email but it seems to fail. (I think because of the file size)


VT:
https://www.virustotal.com/en/file/5d1100cb40f45d44d0982c0b9bbf79c1f6394e6ad2dd065492beabd7a9508f87/analysis/1384543254/

Thanks

Scott
Hello,
send the file to virus@avast.com put "False positive" to email subject.

Milos
Logged

spg SCOTT

  • Guest
Re: False Positive detection on EvernoteMarkup.exe VPS:131114-1
« Reply #5 on: November 15, 2013, 09:55:19 PM »
Quote from: Steven Winderlich on November 15, 2013, 08:59:06 PM
First submission 2013-11-15 19:20:54 UTC (37 Minutes ago)

Maybe this is not a false positive.

Are you sure?

That was me, sure. This is a new file from Evernote as part of a new beta released today. I feel that it is a false positive, yes.


Quote from: Steven Winderlich on November 15, 2013, 09:19:50 PM
You can also use Malwr: https://malwr.com/submission/

That failed with an error:

Quote
ERROR :-(
Uploaded file over size limit.


Quote from: Milos on November 15, 2013, 09:33:50 PM
Hello,
send the file to virus@avast.com put "False positive" to email subject.

Milos
I have tried that, a few times now. The email fails to send. I think this is because of the size. It is 46 MB uncompressed.
Do you have an alternative way for me to send you the file?

Scott
Logged

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: False Positive detection on EvernoteMarkup.exe VPS:131114-1
« Reply #6 on: November 15, 2013, 09:57:47 PM »
Put the into a zip folder and set a password on it.

Maybe it works then.

You can also send files via chest. Right click on file in chest and choose send to virus lab.
Fill the form and send it. File will be sent in next update.
Logged
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

spg SCOTT

  • Guest
Re: False Positive detection on EvernoteMarkup.exe VPS:131114-1
« Reply #7 on: November 15, 2013, 10:08:55 PM »
It is the zipped/passworded file that is failing to be emailed.

Like I said in the first post, I have sent it via the virus chest.
Logged

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: False Positive detection on EvernoteMarkup.exe VPS:131114-1
« Reply #8 on: November 15, 2013, 10:11:44 PM »
Can you upload it somewhere like Google Drive and send a link?

Or can you send a direct download link?
Logged
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

spg SCOTT

  • Guest
Re: False Positive detection on EvernoteMarkup.exe VPS:131114-1
« Reply #9 on: November 15, 2013, 10:25:48 PM »
Duh, forgot about a link :D

It is found in the install file here:
http://cdn1.evernote.com/win5/prerelease/Evernote_5.1.0.1869.exe
Logged

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: False Positive detection on EvernoteMarkup.exe VPS:131114-1
« Reply #10 on: November 15, 2013, 10:27:17 PM »
Okay, send that link to Avast and explain the problem to them.
Logged
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

spg SCOTT

  • Guest
Re: False Positive detection on EvernoteMarkup.exe VPS:131114-1
« Reply #11 on: November 15, 2013, 10:40:28 PM »
Done

Link in an email.
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37532
  • Not a avast user
Re: False Positive detection on EvernoteMarkup.exe VPS:131114-1
« Reply #12 on: November 15, 2013, 10:53:07 PM »
Quote from: spg SCOTT on November 15, 2013, 10:40:28 PM
Done

Link in an email.
How to send big files    ;)   Filemail   www.filemail.com     reciver get a download link

Logged

spg SCOTT

  • Guest
Re: False Positive detection on EvernoteMarkup.exe VPS:131114-1
« Reply #13 on: November 16, 2013, 02:32:32 PM »
Quote
Hello,
Thank you for your message.
The detection will be fixed in the next VPS - please update your virus definitions.
We are sorry for the inconvenience.
Best regards,

Lukas Havel
Technical Support Specialist

Fixed in 131116-0

Thanks all :)

Scott
Logged
Pages: [1]   Go Up
« previous next »